Skip to content

Document E2EE: Advantages and limitations #1152

Description

@tbsbdr

We urgently need to document E2EE, as incorrect usage can result in data loss. IMO, the following needs to be clear at least:

  • Web scope: E2EE is currently focused on Web. There is no "batteries-included" solution for desktop and mobile yet. The alternative for experts is to use rclone, but we need to clearly state that this is a manual, expert-only option.
  • Advantages: Nobody without the password can access the contents of a vault. (As of now, system-level admins can still access all files without E2EE!)
  • Limitations: No collaboration, search, etc. No out-of-the-box decryption in mobile and desktop clients.
  • Usage:
    • First create an E2EE folder, then put the files to be encrypted into that folder.
    • Make clear that you cannot right-click a resource and select "Encrypt".
    • The password cannot be recovered. Be careful! Losing the password means losing the data. This makes E2EE a reliable way of shredding data.
  • Clients: What do desktop and mobile clients see? What happens if you use rclone and try to work collaboratively on text files?

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions